PaperCut has released a second emergency security patch after researchers discovered bypass techniques that circumvent the initial fix for actively exploited vulnerabilities CVE-2023-27350 and CVE-2023-27351. The flaws allow unauthenticated remote code execution in PaperCut MF and NG print managemen
Two critical vulnerabilities in PaperCut NG/MF print management software can be chained together to achieve unauthenticated remote code execution. The vulnerabilities affect versions prior to 20.1.7, 21.2.11, and 22.0.9, allowing attackers to bypass authentication mechanisms and execute arbitrary co
Cybersecurity researchers have uncovered 19 malicious browser extensions on the Chrome Web Store and Microsoft Edge Add-ons marketplace containing wallet-stealing and crypto-draining code. These extensions masqueraded as legitimate productivity and utility tools while silently exfiltrating cryptocur
The Bureau of Alcohol, Tobacco, Firearms and Explosives (ATF) has confirmed a “major” cybersecurity incident following claims by a ransomware group that they breached the federal agency’s systems. The Department of Justice’s Inspector General is leading the investigation into the breach, which repor
Two alleged members of the TeamPCP cybercriminal group have been arrested and face federal charges following a months-long supply-chain attack campaign that compromised multiple software vendors and affected thousands of downstream organizations. The arrests mark a significant disruption to one of 2
Rapid7’s investigation uncovered a thriving underground economy where cybercriminals trade Social Security Numbers (SSNs) and personal identifiable information (PII) of 476 corporate executives across dark web marketplaces. These “Identity-as-a-Service” platforms commoditize executive credentials, e
A newly discovered backdoor dubbed SLEEPWALKER has been found masquerading as a legitimate ESET antivirus agent on Windows systems. This advanced malware remains dormant until activated by a specially crafted network packet, allowing attackers to maintain persistent access while evading detection. T
The FBI has successfully disrupted the QTFY hacking infrastructure, a sophisticated Chinese state-sponsored operation targeting U.S. critical infrastructure and government networks. The operation involved seizing command-and-control servers and disrupting malicious implants across compromised system
Cisco has disclosed five critical vulnerabilities in its Secure Workload platform, with two receiving the maximum CVSS score of 10.0. These flaws enable unauthenticated remote code execution, privilege escalation, and complete system compromise. Organizations running affected versions must patch imm
A critical remote code execution (RCE) vulnerability in Elementor Pro, one of WordPress’s most popular page builders with over 12 million installations, allows authenticated attackers to execute arbitrary PHP code on vulnerable sites. The flaw, tracked as CVE-2023-32243, affects Elementor Pro versio
